oenasea

MAL-2024-10050

PyPImalware6/28/2024
Description

Malicious code in oenasea (PyPI)

Indicators of Compromise
SHA256 Hashes (4)
5deeba760b858aa30456a4e926cdb8e7b5cc375844c2f4c85764042dded621b5
61cd316da681d5bf21ef1ed6f54fdd59847a56e77a1de56b9c729aa672f66252
984cb125e77ec44c2064b9b147f014bf467873af4d417580e7b23057fa01cd48
352f4e97f398fbf5d222c14efefc3898a20c7f8db54169fe324b17bcdbb04570
References (3)
https://www.cert.at/en/blog/2024/3/hobby-hunter-notes-pypi-under-attackOSVhttps://blog.phylum.io/typosquatting-campaign-targets-python-developers/OSVhttps://bad-packages.kam193.eu/pypi/package/oenaseaOSV
Details
EcosystemPyPI
Attack Typemalware
Published6/28/2024
Quick Actions
All IncidentsPyPI Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001